ms-swift version 4.5.2 contains a server-side request forgery (SSRF) vulnerability in its swift deploy OpenAI-compatible API. The vulnerability exists because the API fetches multimodal media URLs without performing any validation or redirect filtering. Unauthenticated attackers can exploit this by supplying arbitrary image_url, audio_url, or video_url parameters in API requests. This causes the server to issue HTTP requests to attacker-controlled destinations, including internal network services and cloud metadata endpoints such as AWS IMDSv1. The vulnerability is located in the vision_utils.py file within the swift template module. Since no authentication is required to trigger the flaw, the attack surface is broad for any publicly exposed deployment. Successful exploitation could lead to internal network reconnaissance, credential theft from cloud metadata services, and further lateral movement. The issue has been reported and tracked publicly via GitHub issues and VulnCheck advisories.
